endpoint_mixin.py

# Copyright 2021 Camptocamp SA
# @author: Simone Orsi <simone.orsi@camptocamp.com>
# License LGPL-3.0 or later (http://www.gnu.org/licenses/lgpl).

import werkzeug

from odoo import fields, models


class EndpointMixin(models.AbstractModel):
    _inherit = "endpoint.mixin"

    auth_api_key_group_ids = fields.Many2many(
        comodel_name="auth.api.key.group",
        string="Allowed API key groups",
    )

    def _selection_auth_type(self):
        return super()._selection_auth_type() + [("api_key", "API key")]

    def _validate_request(self, request):
        super()._validate_request(request)
        if self.auth_type == "api_key":
            self._validate_api_key(request)
        return

    def _validate_api_key(self, request):
        key_id = request.auth_api_key_id
        if key_id not in self._allowed_api_key_ids():
            self._logger.error("API key %s not allowed on %s", key_id, self.route)
            raise werkzeug.exceptions.Forbidden()

    def _allowed_api_key_ids(self):
        return self.auth_api_key_group_ids.auth_api_key_ids.ids

    def action_view_api_key_groups(self):
        xmlid = "auth_api_key_group.auth_api_key_group_act_window"
        action = self.env["ir.actions.act_window"]._for_xml_id(xmlid)
        action["domain"] = [("id", "in", self.auth_api_key_group_ids.ids)]
        return action